Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143225.roa
File: AS143225.roa (raw, json)
Hash identifier: VKZ69b4fAouYlgnuqD1aOfgxPhtDtaW+AsfwGz6Y8xI=
Subject key identifier: 08:06:88:1B:03:8A:6F:1C:43:94:33:D3:00:5B:8D:65:AE:2C:15:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56B435144A42431F3C1BD1614B1917CA5EF494BF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143225.roa
Signing time: Fri 22 May 2026 04:26:49 +0000
ROA not before: Fri 22 May 2026 04:21:49 +0000
ROA not after: Fri 21 May 2027 04:26:49 +0000
asID: 143225
IP address blocks: 240a:a23f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b4:35:14:4a:42:43:1f:3c:1b:d1:61:4b:19:17:ca:5e:f4:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:49 2026 GMT
Not After : May 21 04:26:49 2027 GMT
Subject: CN=0806881B038A6F1C439433D3005B8D65AE2C1563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:4c:4f:29:06:7e:89:63:73:7e:e4:c3:9f:
59:19:6d:c2:82:eb:1c:32:c2:c5:7b:07:4e:7b:05:
9e:4c:1f:33:43:d4:52:28:22:39:5f:26:85:c2:67:
78:4b:1a:f3:5d:61:13:9d:27:d6:1c:38:14:68:bb:
4f:48:a5:a0:b6:b9:17:59:ae:80:47:07:91:f1:db:
c5:6a:0d:a3:b9:51:f6:a0:f9:af:cc:c6:cd:d9:cb:
67:18:65:64:f7:f1:5b:a6:9f:b1:2a:cf:4a:ab:b6:
a9:21:2f:ae:62:5d:65:d5:1a:79:88:2c:33:58:d8:
1d:8a:62:52:b8:1e:7e:24:00:df:d5:14:88:53:a6:
3a:9e:1b:32:1b:b1:00:69:68:57:b3:03:9a:18:ca:
0f:b2:41:c6:86:9e:25:da:f7:b7:af:0e:a2:c3:6f:
18:20:d3:bf:d7:b0:95:06:a0:45:2e:7e:be:8a:7d:
dd:40:cd:68:0c:85:84:bf:ce:7b:02:c2:c6:5f:09:
95:86:81:dc:35:44:0f:85:c1:e1:a0:9e:d6:92:94:
70:7e:1a:3e:36:ae:5c:02:8a:99:26:7f:0b:cf:c1:
63:be:6c:2f:35:ee:90:85:b7:c9:49:cc:9d:d0:71:
76:da:09:20:9e:c1:80:9b:41:10:d1:fe:37:fe:8b:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:06:88:1B:03:8A:6F:1C:43:94:33:D3:00:5B:8D:65:AE:2C:15:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143225.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a23f::/32
Signature Algorithm: sha256WithRSAEncryption
91:6d:25:92:6b:94:ba:86:5a:04:08:99:f3:ba:d5:75:1a:88:
2e:14:88:06:3f:42:4c:32:6e:0b:1b:8d:0a:40:d7:b0:e2:e4:
66:67:7e:4e:54:9d:57:20:5d:8e:f8:4d:89:e8:6f:2c:bd:ea:
43:85:49:40:04:7e:e5:78:50:72:ba:95:db:98:fa:d7:aa:ec:
a5:98:45:9c:1d:91:e0:9c:e5:e2:2e:ef:39:e1:d5:2b:d0:fc:
6e:28:9a:a4:9e:27:ae:c4:af:cc:03:90:48:d0:63:40:df:7f:
8c:25:8a:8a:4b:26:5e:d1:21:07:11:0f:f7:5d:24:4b:60:81:
7f:43:90:b8:1b:d6:6a:6c:47:2a:b8:11:6f:92:30:b9:5a:bf:
7c:a8:41:35:97:90:06:f7:6a:76:cc:89:2b:ee:1d:c4:17:b2:
a5:ec:0f:76:92:dc:8d:59:81:96:f1:89:0a:fe:a9:d1:c2:ed:
ad:e0:24:2f:d6:60:25:75:0d:37:74:f0:40:ad:ee:9e:18:a2:
88:f5:9f:1b:78:89:72:37:fb:63:12:d8:78:bd:d6:fb:40:0d:
0b:42:84:ba:d0:51:61:3a:81:2c:52:b9:f3:be:ea:b9:82:1f:
c2:7e:4a:27:8f:0a:0c:5b:71:be:8d:7e:af:12:e9:f2:36:36:
0e:42:3b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:58 2026 by rpki-client